Placing your first order with a new packaging supplier without auditing them first is one of the most common — and costly — mistakes in procurement. A single production run with the wrong materials, off-brand colors, or missing certifications can delay product launches, trigger customer complaints, or force a costly recall.
This guide walks you through exactly how to conduct a packaging supplier audit: which standards to check, a practical three-phase process (desk review, on-site walkthrough, sample testing), how to build and verify a real audit trail, how to score what you find, and the red flags that should stop the process outright. Follow these steps in order and you will know exactly what you are getting before money changes hands.
Quick Answer
To conduct a packaging supplier audit, run three phases in order: a desk review that verifies certifications such as ISO 9001, BRCGS Packaging Materials, or SQF against your specifications; an on-site or video walkthrough that confirms real production conditions and traceability records match the paperwork; and physical sample testing of a golden sample against your approved spec. Score findings by severity — critical, major, minor — and require a documented audit trail of any corrective action before you approve a supplier for a first order.
How to Conduct a Packaging Supplier Audit, Step by Step
A packaging supplier audit follows the same core sequence whether you are vetting a corrugated box manufacturer or a flexible film converter: define scope, review documents, verify in person, test samples, and score the result.
Step 1: define your scope — decide whether this is a full quality-system audit or one focused on a single product line, and confirm which standards apply (food-contact, pharmaceutical, or general commercial packaging). Step 2: request and review documentation remotely before you schedule any travel or video call. Step 3: conduct the on-site or virtual walkthrough to confirm the paperwork matches the production floor. Step 4: pull and test a physical pre-production sample against your approved specification. Step 5: score every finding by severity — critical, major, or minor — instead of treating the audit as a gut-feel pass or fail. Step 6: assign an outcome: approved with no restrictions, conditionally approved pending corrective action within a set window (commonly 30 to 90 days), or rejected outright for critical findings like undisclosed subcontracting or broken lot traceability. Step 7: set a re-audit cadence based on risk — higher-criticality or higher-volume suppliers are typically reassessed annually, while lower-risk suppliers verified through interim checks like questionnaires or certificate reviews may go two to three years between full audits — plus a triggered audit after any major production issue or process change.
Packaging Supplier Audit Standards: What They Cover
Which standard applies depends on what you are packaging. ISO 9001 is a general quality-management-system certification and a reasonable baseline for any supplier, but it doesn’t certify anything specific to packaging safety. For food-contact packaging, look for the BRCGS Global Standard for Packaging Materials — Issue 7, published in October 2024, is the current version — or SQF, which is the certification most commonly required by North American grocery retailers. FSSC 22000 combines ISO 22000 food safety management with a packaging-specific prerequisite standard and is accepted as an alternative to BRCGS or SQF in many supply chains, and it’s often the default choice for manufacturers supplying multinational brands. BRCGS, SQF, FSSC 22000, and IFS are all recognized under the Global Food Safety Initiative (GFSI) benchmark, so a retailer that requires ‘a GFSI-recognized certification’ will typically accept any one of the four — though which one a supplier actually holds tends to track geography: SQF for North American retail, BRCGS for the UK and much of the EU, IFS for continental European grocery chains, and FSSC 22000 for suppliers serving global manufacturers.
Outside food-contact packaging, FSC or PEFC chain-of-custody certification verifies sustainable sourcing claims, and ISO 15378 applies to primary packaging materials for pharmaceutical products. None of these certifications substitute for your own audit — a current certificate confirms the supplier passed a third-party audit against that standard’s checklist, not that they meet your specific product, color, and tolerance requirements. Treat certification as a prerequisite that narrows your shortlist, and treat your own three-phase audit as the step that actually qualifies a supplier for your first order.
Phase 1: The Desk Review — What to Verify Before You Visit
Start with documentation you can request and review remotely. Ask for current certificates and check expiry dates against the standards above. Beyond certificates, request a copy of their quality management system documentation, a sample corrective action and preventive action (CAPA) log, and records from a recent internal or third-party audit. Suppliers who hesitate to share audit records before a contract are showing you something important. Also confirm whether any production steps are subcontracted — undisclosed subcontracting discovered during a site visit is a hard stop for most quality programs.
Phase 2: The On-Site Walkthrough Checklist
Whether you visit in person or conduct a live video walkthrough, the goal is to confirm that what was documented in Phase 1 reflects what actually happens on the production floor. A sales tour is not an audit — insist on direct access to inspection logs, calibration records, CAPA history, and the working production floor itself, not just a lobby and a conference room.
Confirm they specialize in your required substrate (corrugated, rigid, flexible film, etc.) and printing method (offset, flexo, digital), and check that capacity aligns with your anticipated volumes. Walk through incoming material inspection procedures — a reliable supplier can trace any finished packaging lot back to its incoming raw material lots; if they cannot demonstrate that link during your visit, that is a red flag. Check that testing equipment — color spectrophotometers, compression testers, moisture meters — is in active use and displays current calibration dates; uncalibrated equipment means test results are meaningless. Observe whether production workers use SOPs with visible revision dates or loose, unmarked printouts, and look for line clearance and in-process inspection records being actively completed, not just filed away. Finally, ask to see how manual record corrections are made — corrections should use a single strikethrough with initials and a date, not correction fluid, erasure, or an unexplained overwrite. That one detail in a logbook tells you more about a supplier’s quality culture than almost anything else on the floor.
Phase 3: Sample Testing Against Your Approved Spec
Phase 3 turns paperwork and observation into a physical test. Request a golden sample — the physical benchmark the supplier previously matched approval on — alongside a current pre-production sample of the same job, then compare them side by side against your approved spec sheet: dimensions, GSM or caliper, color measured with a spectrophotometer against your Pantone or Delta-E tolerance (not eyeballed), print registration, seal or closure strength, and any barrier or migration requirements for food-contact packaging. For structural packaging, run a compression or drop test if your product is fragile or heavy; for flexible film, verify seal integrity under the pressure and temperature your actual filling line uses. Keep the tested sample and the written test report on file — both become part of that SKU’s audit trail and matter if a dispute comes up after production starts.
What Is a Packaging Audit Trail (and How to Verify One)
A packaging audit trail is the complete, time-stamped record connecting a finished pack back to everything that went into making it: the raw material lot numbers used, the machine and operator that ran the job, in-process inspection results, any manual corrections, and the final quality release sign-off. It matters because it’s what makes a targeted recall possible — without a working audit trail, one out-of-spec or contaminated raw material lot can force a supplier to recall everything they’ve ever shipped instead of just the affected lots.
During an audit, don’t just ask whether a traceability system exists — make the supplier demonstrate it live. Pick a finished lot at random and have them trace it backward to its incoming raw material lots, then forward to which customers or shipments came from that same raw lot; a supplier with a real audit trail can usually do this in minutes. Also check how corrections are handled in paper and electronic records alike: a compliant correction shows the original entry, the corrected value, who made the change, and when, with nothing erased, whited out, or overwritten. If the supplier uses an electronic batch record system, ask whether it logs changes automatically — a true system-generated audit trail — or relies on staff to manually note edits, which is far easier to falsify or backdate.
How to Score Findings and Decide an Outcome
Score every finding against three tiers instead of a single pass/fail. Critical findings are safety or compliance failures — undisclosed subcontracting, broken lot traceability, an expired certification, or falsified records — that should stop the audit outright. Major findings are real gaps that put your product at risk but have a fix, such as uncalibrated test equipment or missing CAPA records for a known issue. Minor findings are housekeeping items — a missing revision date on an SOP, a slightly disorganized sample retention area — that don’t affect product safety or conformance on their own.
Turn the scored findings into one of three written outcomes: approve with no restrictions when there are no critical or major findings; approve conditionally, with corrective action required within a set window (commonly 30 to 90 days) and a follow-up document review or re-audit to confirm the fix, when findings are major but fixable; or reject outright when you find a critical issue. Put the outcome and any corrective action deadline in writing and share it with the supplier — a verbal ‘looks good’ isn’t a document you can point to later.
Red Flags That Should Stop a Packaging Supplier Audit
Some findings are severe enough to end the audit on the spot rather than waiting for a final score: a supplier that cannot trace a finished lot back to its incoming raw materials; subcontracting discovered on the floor that wasn’t disclosed during the desk review; test equipment running without a current calibration certificate; rework or reject material re-entering the line without documentation; and any sign of altered or backdated records, including corrections made with correction fluid or erasures instead of a dated strikethrough. Treat any one of these as disqualifying — a reason to walk away or demand resolution before you place a single order — not just points off a score.
Packaging Supplier Audit Checklist (Quick Reference)
Before you approve a new supplier, confirm you have documented evidence — not just a verbal answer — for each of these: current, unexpired certifications matching your product type (ISO 9001 plus BRCGS, SQF, or FSSC 22000 for food-contact packaging); a CAPA log and at least one recent internal or third-party audit report; full disclosure of any subcontracted production steps; a live demonstration of lot traceability in both directions; current calibration records for any equipment used to test your product; SOPs with visible revision dates in active use on the floor; a golden sample and test report matching your approved spec; and a written outcome with a corrective action deadline if the audit wasn’t a clean pass. If a supplier can’t produce any item on this list within a reasonable timeframe, treat that gap itself as a finding.
packaging supplier audit checklist FAQs
What is a packaging audit trail?
It’s the complete record connecting a finished package back to its raw material lots, the equipment and operator that produced it, any manual corrections, and the final quality sign-off. A working audit trail is what lets a supplier trace and recall a specific affected lot instead of everything they’ve ever shipped.
How often should you audit a packaging supplier?
Audit frequency should be risk-based rather than fixed: higher-criticality or higher-volume suppliers are commonly reassessed annually, while lower-risk suppliers verified through interim questionnaires or certificate checks may go two to three years between full audits. Any supplier should also get a triggered audit after a major production issue, a process or facility change, or a certification lapse.
What certification should a food-contact packaging supplier have?
Look for BRCGS Global Standard for Packaging Materials or SQF at minimum, or FSSC 22000 as a GFSI-recognized alternative. ISO 9001 alone is a reasonable baseline but isn’t packaging- or food-safety-specific.
Can you audit a packaging supplier remotely?
Yes for the desk review, and often for the walkthrough via live video, but physical sample testing against your approved spec still requires a tangible sample in hand — you can’t fully qualify a supplier on documents and video alone.
What’s the difference between a major and a critical audit finding?
Critical findings are safety or compliance failures — broken traceability, undisclosed subcontracting, falsified records — that should stop the audit outright. Major findings are real but fixable gaps, like uncalibrated equipment, that warrant conditional approval pending corrective action.
Find the Right Packaging Supplier
Search the free Packaura supplier directory — filter by material, certification, and location to find vetted suppliers. Search the Supplier Directory.
Want packaging news in your inbox? Subscribe to the free newsletter.